CVE-2026-15539

Publié : 13 juillet 2026

Modifié : 13 juillet 2026

Score CVSS

4.7

MEDIUM

Description détaillée

A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component Book Image Upload Feature. Such manipulation leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://medium.com/@hemantrajbhati5555/critical-authenticated-remote-code-execution-rce-via-unrestricted-file-upload-5a4a313ea1f1 https://vuldb.com/cve/CVE-2026-15539 https://vuldb.com/submit/855046 https://vuldb.com/vuln/377889 https://vuldb.com/vuln/377889/cti https://www.sourcecodester.com/

Dernières Vulnérabilités

CVE-2026-57830

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.

VOIR DÉTAILS

CVE-2026-57829

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS.

VOIR DÉTAILS

CVE-2026-4769

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

VOIR DÉTAILS